Best Practices Domino Security - Nash!

More documents

Recommendations

Info

Stored Forms Stored Forms can be used to send own "code" to be executed when document is opened TN #7003195 Q&A: BugTraq "Lotus Notes Stored Form Vulnerability" This option can be a potential security problem As long you have locked down ECL you are quite safe You can disable Stored Forms in most databases Disable Stored Forms in Templates <strong>Nash</strong>!Com provides a free command-line tool to disable "Stored Forms" property in existing databases
Monitoring & Logging Event Monitors for security options ACL Monitors, Events for <strong>Security</strong> RTFL Reading logs periodical makes a lot of sense - even you have implemented detailed event logging! Check the activities of databases Use Domlog.nsf There are a lot of ways to filter the requests A lot of partner tools will also help here
Page 2 and 3: Best Practices Domino Security BP11
Page 4 and 5: Agenda General Considerations Hardw
Page 6 and 7: An holistic approach to Domino Secu
Page 8 and 9: Report Security Concerns/Bugs Don't
Page 10 and 11: Network Security Network infrastruc
Page 12 and 13: Secure Shell (SSH) Linux Normally i
Page 14 and 15: Notes.ID Password Security Sadly th
Page 16 and 17: Password Quality Checking Use passw
Page 18 and 19: Security by Obscurity Hiding inform
Page 20 and 21: Sample ECL Settings
Page 22 and 23: Centralized ECL in Domino Directory
Page 24 and 25: ACL & Security Disable -Default- ac
Page 26 and 27: Security for Paranoid Admins Only a
Page 28 and 29: Know Issue with Reader&Author/Field
Page 30 and 31: UserNames List The user names list
Page 32 and 33: Internal Views ($ServerAccess) Is u
Page 34 and 35: Encryption of Local Databases Encry
Page 36 and 37: Caveats for Encryption Encrypted fi
Page 38 and 39: Web-Security "Anonymous"" matches b
Page 42 and 43: Client Security Settings
Page 44 and 45: Check Effective access Check access
Page 46 and 47: Domino 6 Directory Assistance Suppo
Page 48 and 49: Full Access Administrators Addition
Page 50 and 51: Disable the Full Access Administrat
Page 52 and 53: New Agent-Restriction Settings Unre
Page 54 and 55: D6 Agent Manager Security Changes I
Page 56 and 57: Notes 6 User Client Access Security
Page 58 and 59: Interesting Articles http://www.ibm

Best Practices Domino Security - Nash!

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?